found a serious bug, access_token pattern detection maybe wrong. This may not be a good fix, temp version.